Tangem wallet accidentally collected users' mnemonics due to email-related glitch

Tangem, a cryptocurrency wallet service provider, has recently fixed a major security vulnerability in its mobile app that caused some users' private keys to be accidentally collected via email. Previously, Reddit users questioned this, pointing out that Tangem exposed users' private keys to email accounts and its employees, threatening the safety of investors' funds. Some users pointed out that Tangem did not respond appropriately to the problem, and that users' private keys may be retained in multiple email histories and work order tracking systems, posing a security threat to all Tangem users. On December 30, Tangem acknowledged the problem and explained that it was a bug in the mobile app log processing, which has now been resolved. When creating a wallet through a mnemonic phrase, the private key was mistakenly recorded in the application log, which can be accessed when interacting with the support team. On the same day, Tangem released an app update, but the official website did not mention the specific details. Tangem also confirmed that all logs and attachments sent to the support team have been permanently deleted to ensure that no data is left. Although Tangem said that the vulnerability only affected a small number of users, some members of the crypto community still expressed dissatisfaction with its low-key handling. As of December 31, Tangem has not released any related announcements on social media. To prevent potential private key leakage risks, all Tangem users are advised to update their mobile applications immediately. (Cointelegraph)